CVEs published in January 2019
1,173 vulnerabilities, 147 critical, 5 exploited.
- cisco webex wrf player, webex meetings online, webex meetings server +2 moreCisco Webex Network Recording Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco webex teamsCisco Webex Teams URI Handler Insecure Library Loading Vulnerability7.8 High
- mz-automation libiec61850An issue has been found in libIEC61850 v1.3.1. There is a use-after-free in the getState function...7.5 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privilege Escalation Vulnerability6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Logging Cross-Site Scripting Vulnerability6.1 Medium
- jenkinsImproper Limitation of a Pathname to a Restricted Directory in Jenkins6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privileged Account Sensitive Information Disclosure Vulnerability6.5 Medium
- thinkcmfapp\admin\controller\RouteController.php in ThinkCMF 5.0.190111 allows remote attackers to...9.8 Critical
- phpshePHPSHE 1.7 has SQL injection via the admin.php?mod=order state parameter.7.2 High
- phpshePHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state product_id[] parameter.7.2 High
drupal/cleantalkPackagistAnti-spam module by CleanTalk to protect your Drupal sites from spambot registration and spam comments publications thru comment and contact forms. This module does not sufficiently filter submitted c…No scoredrupal/preview_linkPackagistThe Preview Link module enables you to generate preview links so anonymous users can access unpublished revisions of content. The last release of the module introduced an access bypass allowing users…No score- apache airflowImproper Certificate Validation in Apache Airflow7.5 High
- avaya ip officeIP Office one-X Portal XSS6.8 Medium
- apache airflowApache Airflow vulnerable to XSS9.8 Critical
- apache airflowCross-Site Request Forgery (CSRF) in Apache Airflow8.8 High
- apache airflowImproper Input Validation in Apache Airflow resulting in Remote Code Execution8.8 High
- powerdns recursor, power dns pdns-recursor +1 moreAn issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the...3.7 Low
- powerdns recursor, power dns pdns-recursor +1 moreAn issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks...5.4 Medium
- ibm financial transaction managerIBM Financial Transaction Manager 3.2.1 for Digital Payments could allow an authenticated user to...4.3 Medium
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic...5.9 Medium
- mcafee total protection (mtp), total protection +1 moreDLL Search Order Hijacking vulnerability7.2 High
- mcafee mvision endpointExploitation of Authentication vulnerability7.4 High
- phpwindphpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback...7.2 High
- lua, canonical ubuntu linux +1 moreLua 5.3.5 has a use-after-free in lua_upvaluejoin in lapi.c. For example, a crash outcome might...7.5 High
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...7.8 High
- aspeedtech ast2400 firmware, ast2500 firmware, netapp fas\/aff baseboard management controller +2 moreThe ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware...9.8 Critical
- ics-cert cx-supervisorA type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3...7.3 High
- ics-cert cx-supervisorSeveral use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and...8.8 High
- ics-cert cx-supervisorAn attacker could inject commands to delete files and/or delete the contents of a file on CX...5.0 Medium
- ics-cert cx-supervisorCX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project...8.8 High
- brocade network advisor, netapp brocade network advisor +1 moreA Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote...7.5 High
- brocade network advisor, netapp brocade network advisor +1 moreA Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote...9.8 Critical
- brocade network advisor, netapp brocade network advisor +1 moreA vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated,...8.1 High
- creditease-sec insightAn issue was discovered in creditease-sec insight through 2018-09-11. user_delete in srcpm/app...8.8 High
- creditease-sec insightAn issue was discovered in creditease-sec insight through 2018-09-11. depart_delete in srcpm/app...8.8 High
- creditease-sec insightAn issue was discovered in creditease-sec insight through 2018-09-11. role_perm_delete in srcpm...8.8 High
- creditease-sec insightAn issue was discovered in creditease-sec insight through 2018-09-11. login_user_delete in srcpm...8.8 High
- drupal, drupal core +1 moreAccess bypass in Drupal 8 views6.5 Medium
- broadcom service desk managerCA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to...9.8 Critical
- broadcom service desk managerCA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to...7.5 High
- [unknown] satelliteAn improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can...6.8 Medium
- chatopera cosinThere is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute...9.8 Critical
- jenkins, redhat openshift container platform +1 moreImproper Authorization in Jenkins Core7.2 High
- jenkins, redhat openshift container platform +1 moreImproper Authorization in Jenkins Core7.2 High
- jenkins project pipeline: declarative plugin, jenkins pipeline\, redhat openshift container platform +2 moreJenkins Pipeline Declarative Plugin sandbox bypass vulnerability8.8 High
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreJenkins Groovy Plugin sandbox bypass vulnerability8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreProtection Mechanism Failure in Jenkins Script Security Plugin8.8 High
- fortinet fortiadc, fortios, fortios, fortiadc +1 more +3 moreA Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6...4.3 Medium
- opensc project openscsc_context_create in ctx.c in libopensc in OpenSC 0.19.0 has a memory leak, as demonstrated by a...7.5 High
- Show moreLoading…